Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HhQVLOokt5NqxoIvC7gXXS3BTLw.roa
File: HhQVLOokt5NqxoIvC7gXXS3BTLw.roa (raw, json)
Hash identifier: jlgfm7zs7ia0lpNcRRGlj+gB2mhTDEM6L2iH1aNbTpE=
Subject key identifier: 1E:14:15:2C:EA:24:B7:93:6A:C6:82:2F:0B:B8:17:5D:2D:C1:4C:BC
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F74CE3F1883C97F97FB2D0E1C9AB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HhQVLOokt5NqxoIvC7gXXS3BTLw.roa
Signing time: Sun 01 Jan 2023 20:45:23 +0000
ROA not before: Sun 01 Jan 2023 20:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 217.156.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 03 Apr 2023 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f7:4c:e3:f1:88:3c:97:f9:7f:b2:d0:e1:c9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e14152cea24b7936ac6822f0bb8175d2dc14cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:85:d1:21:ce:05:22:4f:8e:ea:84:57:7a:
99:51:9c:88:e5:6d:a1:50:81:f0:55:61:c2:f9:69:
23:20:33:5c:e9:67:42:20:6e:ce:1d:66:33:c9:49:
eb:c7:be:cc:b0:84:35:cf:94:15:18:66:bd:84:57:
1c:1e:4f:f9:91:e7:cb:4b:82:76:56:fd:b3:00:b4:
26:e4:ef:2b:cc:af:94:30:fa:cd:49:fa:39:3a:34:
c5:25:58:95:46:e4:5b:bd:41:ed:af:6a:1f:94:12:
00:50:ba:3b:c7:32:e8:db:31:a8:bb:28:9b:3b:0e:
03:ba:be:23:51:fe:f2:5e:f5:6b:33:6e:76:33:fe:
13:cb:97:fb:0a:36:79:3b:f8:b7:d8:69:5e:42:8f:
4d:06:d9:ad:1e:08:f6:41:a2:ee:90:e2:7b:61:0e:
ae:f9:ca:8b:bb:cc:af:22:56:1b:31:71:f8:b8:c2:
1d:e1:f4:e1:51:ba:17:83:91:9d:eb:5e:06:73:1b:
6a:58:bc:01:1f:47:08:59:7e:0a:16:3c:d9:c6:fc:
f3:27:52:fc:ce:36:7b:ce:ba:8b:64:f0:07:57:df:
a2:ef:8b:b5:c2:ee:94:91:d8:ed:6d:59:f3:18:f2:
f5:4a:41:54:a4:3e:ad:9f:da:4e:44:ea:13:42:87:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:15:2C:EA:24:B7:93:6A:C6:82:2F:0B:B8:17:5D:2D:C1:4C:BC
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HhQVLOokt5NqxoIvC7gXXS3BTLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.44.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:11:bb:f2:98:18:3d:97:f2:5b:52:fb:21:84:e3:db:6d:f2:
40:3f:d1:c1:d2:aa:7b:fa:b2:26:48:3a:4b:35:5a:62:7e:c5:
13:ab:13:92:f0:cb:82:1a:ae:2d:97:ee:47:6b:12:ea:dd:ee:
22:9e:3b:f0:04:d8:22:2c:35:d9:cd:81:2a:55:c9:79:89:d7:
09:30:54:ba:d9:1f:b9:a5:0c:50:95:40:12:31:59:36:1f:ee:
ab:76:f9:b3:2f:d9:41:f7:c3:1f:91:ef:10:b0:96:d1:89:b6:
5b:f8:32:05:62:3b:08:58:6f:cc:13:db:d1:44:6d:ce:66:d8:
24:8d:4c:4d:aa:5a:7d:73:e5:00:69:18:66:02:42:d5:cb:4e:
8b:a6:68:2c:47:3e:a6:b7:7f:5a:60:b5:6c:4b:49:af:1d:37:
0b:1b:53:db:9f:3a:fe:d4:1c:d7:16:20:1d:3e:b4:5c:54:e3:
7c:20:fb:53:cd:f2:28:4c:8e:9f:ac:90:b2:ec:e2:71:25:af:
72:65:66:74:b2:0b:af:1e:60:e1:31:0e:80:7c:dd:18:f3:d8:
0d:4a:c0:c6:1f:66:0c:04:fe:5f:2e:71:6f:80:06:f6:f8:a7:
87:0a:64:f7:7c:c3:15:9d:20:a7:56:cb:d5:0b:24:98:13:99:
9c:eb:75:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFPdM4/GIPJf5f7LQ4cmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTE0MTUyY2VhMjRiNzkzNmFjNjgyMmYwYmI4MTc1ZDJkYzE0Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtuF0SHOBSJPjuqEV3qZUZyI5W2h
UIHwVWHC+WkjIDNc6WdCIG7OHWYzyUnrx77MsIQ1z5QVGGa9hFccHk/5kefLS4J2
Vv2zALQm5O8rzK+UMPrNSfo5OjTFJViVRuRbvUHtr2oflBIAULo7xzLo2zGouyib
Ow4Dur4jUf7yXvVrM252M/4Ty5f7CjZ5O/i32GleQo9NBtmtHgj2QaLukOJ7YQ6u
+cqLu8yvIlYbMXH4uMId4fThUboXg5Gd614GcxtqWLwBH0cIWX4KFjzZxvzzJ1L8
zjZ7zrqLZPAHV9+i74u1wu6UkdjtbVnzGPL1SkFUpD6tn9pOROoTQoeU0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4UFSzqJLeTasaCLwu4F10twUy8MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSGhRVkxPb2t0NU5xeG9JdkM3Z1hYUzNCVEx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ZwsMA0G
CSqGSIb3DQEBCwUAA4IBAQBsEbvymBg9l/JbUvshhOPbbfJAP9HB0qp7+rImSDpL
NVpifsUTqxOS8MuCGq4tl+5HaxLq3e4injvwBNgiLDXZzYEqVcl5idcJMFS62R+5
pQxQlUASMVk2H+6rdvmzL9lB98Mfke8QsJbRibZb+DIFYjsIWG/ME9vRRG3OZtgk
jUxNqlp9c+UAaRhmAkLVy06LpmgsRz6mt39aYLVsS0mvHTcLG1Pbnzr+1BzXFiAd
PrRcVON8IPtTzfIoTI6frJCy7OJxJa9yZWZ0sguvHmDhMQ6AfN0Y89gNSsDGH2YM
BP5fLnFvgAb2+KeHCmT3fMMVnSCnVsvVCySYE5mc63UA
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org